PWS:Win32/Sapbexts!rfn removal

The PWS:Win32/Sapbexts!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What PWS:Win32/Sapbexts!rfn virus can do?

Unconventionial language used in binary resources: Russian

How to determine PWS:Win32/Sapbexts!rfn?


File Info:
crc32: 5F3C3F2B
md5: 806ce77c89c2a25d67603b34fef8526f
name: 806CE77C89C2A25D67603B34FEF8526F.mlw
sha1: 3ac5f95429da19c4122e40beaadb8aceb303d558
sha256: 4049e8f298a459dac9c3c6c2fade5fc63b22115c08df61b4decb74984aec41bc
sha512: 5c643e4ece17b056fea5d97c7e61e10b2a50539f9f092b25f24b922598d73df04855a18d33091c4a68da26ddf3453de8853f8d571e8d558ebd44a48593be30f8
ssdeep: 1536:Cj2ko2JMiX5l5CGQTLdhuvMb8mxciyPL:Nkokf5l5CGe7uklIL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2008
InternalName: Intel Chipset Support
FileVersion: 3, 1, 1, 1
CompanyName: Intel NGO Chipset
LegalTrademarks: Intel Corp.
ProductName: Chipset Support
ProductVersion: 3, 1, 1, 1
FileDescription: Intel Chipset Support Service
OriginalFilename: Chipset
Translation: 0x0409 0x04b0

PWS:Win32/Sapbexts!rfn also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005326c61 )
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Buzy.210
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	TrojanPSW:Win32/EncPk.cc620d05
K7GW	Trojan ( 005326c61 )
Cybereason	malicious.c89c2a
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Buzy.210
NANO-Antivirus	Trojan.Win32.Crypted.dofaiy
MicroWorld-eScan	Gen:Variant.Buzy.210
Tencent	Trojan.Win32.Cosmu.b
Ad-Aware	Gen:Variant.Buzy.210
Sophos	Mal/Generic-R + Mal/EncPk-ABF
Comodo	TrojWare.Win32.Cosmu.abcd@25iqiu
BitDefenderTheta	Gen:NN.ZexaF.34236.hq0@a4Yb80bc
McAfee-GW-Edition	BehavesLike.Win32.Duptwux.cm
FireEye	Generic.mg.806ce77c89c2a25d
Emsisoft	Gen:Variant.Buzy.210 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
eGambit	Generic.Malware
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	PWS:Win32/Sapbexts!rfn
Arcabit	Trojan.Buzy.210
GData	Gen:Variant.Buzy.210
McAfee	Artemis!806CE77C89C2
MAX	malware (ai score=100)
VBA32	Trojan.Wacatac
Malwarebytes	Malware.Heuristic.1003
Ikarus	Trojan.Win32.Patched
MaxSecure	Trojan.Malware.1728101.susgen
AVG	Win32:CrypterX-gen [Trj]

How to remove PWS:Win32/Sapbexts!rfn?

PWS:Win32/Sapbexts!rfn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X